Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft
File:                     ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft (raw, json)
Hash identifier:          4gHj0slfhgH7iyQjfEWUqHUO6KVmXMd5u2F8nLSEBSI=
Subject key identifier:   D1:67:B2:F8:09:CF:07:05:DF:B1:62:19:28:D6:B1:F1:DE:80:C9:C8
Authority key identifier: 8A:30:4A:F5:53:53:C0:31:46:F7:F3:A6:0C:6A:B5:80:4D:DA:5C:E1
Certificate issuer:       /CN=8a304af55353c03146f7f3a60c6ab5804dda5ce1
Certificate serial:       019365FCA94689501614823FDE0CECDD5762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijBK9VNTwDFG9_OmDGq1gE3aXOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 01:01:17 +0000
Manifest this update:     Tue 26 Nov 2024 01:01:17 +0000
Manifest next update:     Wed 27 Nov 2024 01:01:17 +0000
Files and hashes:         1: ZUauh0EqxNGadxiI-UTcMEyjQGQ.roa (hash: dOmGLxc86hJ/0GIAviVDr7N7kRm4l6s19CQUT3YJCbE=)
                          2: ijBK9VNTwDFG9_OmDGq1gE3aXOE.crl (hash: hNpLELgkP/+8j3WB+C6NFCwk2zqoAEF204HyFELwWws=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijBK9VNTwDFG9_OmDGq1gE3aXOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:a9:46:89:50:16:14:82:3f:de:0c:ec:dd:57:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a304af55353c03146f7f3a60c6ab5804dda5ce1
        Validity
            Not Before: Nov 26 01:01:17 2024 GMT
            Not After : Nov 27 01:01:17 2024 GMT
        Subject: CN=d167b2f809cf0705dfb1621928d6b1f1de80c9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:85:72:40:48:12:59:6b:1a:70:78:12:66:
                    57:be:79:ae:83:ad:2d:a7:b2:59:85:3e:70:19:ce:
                    08:73:ca:71:9d:fe:39:66:5d:00:a8:79:ad:ac:52:
                    28:ad:9e:f4:80:8d:3d:27:e7:d0:9b:da:1e:9f:0a:
                    f8:b9:97:2d:94:0d:a1:c4:27:fe:16:59:07:ed:04:
                    69:35:9c:62:20:1f:1f:59:04:2f:8c:0e:0c:b2:61:
                    92:ac:84:71:1f:2d:f4:90:60:4c:36:99:35:a0:ff:
                    59:b9:97:14:c2:df:a3:46:72:a0:ab:7c:18:69:6e:
                    3c:40:2e:3f:be:4c:66:d9:15:ab:34:f3:52:b6:14:
                    cd:2b:c1:3b:fc:86:bb:5c:63:33:d3:41:aa:6c:ae:
                    5f:7a:a9:9c:2b:cb:48:0a:25:5c:d9:19:4f:6b:e2:
                    c4:33:3f:50:1b:91:e7:ed:cb:5e:1d:86:ab:58:6c:
                    51:6d:6b:1f:6a:41:a2:80:ab:6d:a8:7f:e5:e0:72:
                    03:24:d9:54:dc:08:19:6c:c7:f9:31:e6:77:97:98:
                    13:14:7c:62:bd:df:33:7d:ff:45:d5:ea:7d:83:a6:
                    1c:95:a9:68:b9:33:7b:e7:fc:b2:5d:c2:3f:cc:4f:
                    09:f1:91:65:66:d7:95:89:f5:fe:b0:c9:37:5a:c5:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:67:B2:F8:09:CF:07:05:DF:B1:62:19:28:D6:B1:F1:DE:80:C9:C8
            X509v3 Authority Key Identifier:
                keyid:8A:30:4A:F5:53:53:C0:31:46:F7:F3:A6:0C:6A:B5:80:4D:DA:5C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijBK9VNTwDFG9_OmDGq1gE3aXOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:00:95:fa:fb:8f:d2:fb:91:90:3c:cf:4c:3f:f7:95:1f:d9:
         e7:7a:71:42:af:c8:7d:92:dc:a4:0f:a3:4a:cb:3c:53:e1:0d:
         a4:6a:fc:6f:88:be:fb:73:00:59:04:dd:f3:f2:d5:fb:42:c1:
         13:01:3e:27:66:cd:04:fd:2f:ed:72:4f:b7:98:68:d6:a0:63:
         ca:4d:a4:5b:e8:3e:2c:2e:a8:56:34:8c:47:70:9f:62:78:67:
         7a:f1:21:f5:82:ba:56:72:67:63:db:17:50:67:f0:bd:52:28:
         a8:2e:8f:4e:5a:39:5d:19:6c:fb:7c:3e:d9:76:85:be:f6:3e:
         d2:bb:fb:19:52:88:15:d0:f0:47:14:81:c6:b2:c4:1d:b9:bd:
         c5:61:de:44:a1:eb:04:0d:8b:97:db:32:6b:08:2c:ae:76:75:
         fc:e8:99:7b:34:50:6c:b7:43:21:2b:b2:c1:02:6d:94:04:1a:
         34:01:60:a8:7a:b9:96:2a:bd:3b:a5:59:63:21:7c:e2:36:5d:
         b0:59:12:e8:bd:77:e3:8f:f9:6f:ec:1f:3a:cf:5b:f7:d7:73:
         e4:2c:bc:d9:8a:82:56:f2:d3:96:d1:a5:51:7e:25:70:62:1a:
         20:9c:59:3e:9d:7c:1a:80:8b:2f:c3:06:bd:3e:15:3f:72:b9:
         07:99:ba:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:04 2024 by rpki-client on console-fra.rpki-client.org